Active Directory Repeated Account Lockouts

Starting today one of my users account keeps getting locked out.  Approximately on 15 minute intervals.  Is there any way to see who or what is sending the failing authentication requests?

My active driectory is Win 2003
deklinmAsked:
Who is Participating?
 
Eduardo GoicovichIT ConsultantCommented:
0
 
Joseph DalyCommented:
First step id reccomend is to download the ALtools kit from microsoft. This gives you a tool that will tell you the time and locking domain controller of the user account being locked out.

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=18465

From there you can open the logging on the domain controller to find the event ID generated for the failed logon if you have auditing enabled. This will tell you the originating computer the lock came from and the type of logon process.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.